Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1019488: bouncycastle: incomplete information in the manifest files

34 views
Skip to first unread message

Sudip Mukherjee

unread,
Sep 10, 2022, 8:20:03 AM9/10/22
to
Source: bouncycastle
Version: 1.71-1
Severity: important
X-Debbugs-Cc: sudipm.m...@gmail.com

Dear Maintainer,

The META-INF/MANIFEST.MF file of libbcpg-java contains only the following:

Manifest-Version: 1.0
Ant-Version: Apache Ant 1.10.12
Application-Library-Allowable-Codebase: *
Application-Name: Bouncy Castle OpenPGP API
Automatic-Module-Name: org.bouncycastle.pg
Caller-Allowable-Codebase: *
Class-Path: bcprov.jar
Codebase: *
Created-By: 11.0.15+10-post-Debian-1 (Debian)
Extension-Name: org.bouncycastle.bcpg
Implementation-Vendor: BouncyCastle.org
Implementation-Vendor-Id: org.bouncycastle
Implementation-Version: 1.71.00.0
Permissions: all-permissions
Specification-Vendor: BouncyCastle.org
Specification-Version: 1.1
Trusted-Library: true

Which is incomplete and does not contain all the other required information
like Bundle-Version, Bundle-Name, Export-Package etc. And this lack of information
makes the package unusable when using a SimpleConfigurator based bundles.info file.

But if I see the jar file in the maven repository I can see the manifest file in that
contains all the required information. The jar can be found at:
https://repo1.maven.org/maven2/org/bouncycastle/bcpg-jdk18on/1.71/bcpg-jdk18on-1.71.jar


--
Regards
Sudip

Sudip Mukherjee

unread,
Oct 29, 2022, 7:40:04 PM10/29/22
to
Control: tags -1 patch
--

On Sat, Sep 10, 2022 at 01:09:06PM +0100, Sudip Mukherjee wrote:
> Source: bouncycastle
> Version: 1.71-1
> Severity: important
> X-Debbugs-Cc: sudipm.m...@gmail.com
>
> Dear Maintainer,
>
> The META-INF/MANIFEST.MF file of libbcpg-java contains only the following:
>

<snip>

>
> Which is incomplete and does not contain all the other required information
> like Bundle-Version, Bundle-Name, Export-Package etc. And this lack of information
> makes the package unusable when using a SimpleConfigurator based bundles.info file.

The attached patch is the minimum required to unblock eclipse-tracecompass.
But Emmanuel Bourg did not agree so I am not doing an upload but keeping
the patch here for record.
Ref: https://lists.debian.org/debian-java/2022/09/msg00002.html

--
Regards
Sudip
manifest.patch

Markus Koschany

unread,
Nov 30, 2023, 8:30:07 AM11/30/23
to
This problem still exists in 1.77 (to be released soon). That sounds like a bnd
problem. I can find a reference to a bnd.sh script but it is not included in
the source distribution. There is also a add_module.sh script. If we can't find
a way to automate this build step, we could use jh_manifest which I would
prefer over the patch.
signature.asc
0 new messages